SAMBA Project Documentation

SAMBA Team

Edited by

Jelmer R. Vernooij

John H. Terpstra

Gerald (Jerry) Carter

This book is a collection of HOWTOs added to Samba documentation over the years. Samba is always under development, and so is it's documentation. The most recent version of this document can be found at http://www.samba.org/ on the "Documentation" page. Please send updates to jerry@samba.org or jelmer@samba.org.

This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt

Table of Contents
I. General installation
1. Introduction to Samba
1.1. Background
1.2. Terminology
1.3. Related Projects
1.4. SMB Methodology
1.5. Additional Resources
1.6. Epilogue
1.7. Miscellaneous
2. How to Install and Test SAMBA
2.1. Obtaining and installing samba
2.2. Configuring samba
2.3. Try listing the shares available on your server
2.4. Try connecting with the unix client
2.5. Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client
2.6. What If Things Don't Work?
3. Quick Cross Subnet Browsing / Cross Workgroup Browsing guide
3.1. Discussion
3.2. How browsing functions and how to deploy stable and dependable browsing using Samba
3.3. Use of the Remote Announce parameter
3.4. Use of the Remote Browse Sync parameter
3.5. Use of WINS
3.6. Do NOT use more than one (1) protocol on MS Windows machines
3.7. Name Resolution Order
4. User information database
4.1. Introduction
4.2. Important Notes About Security
4.3. The smbpasswd Command
4.4. Plain text
4.5. TDB
4.6. LDAP
4.7. MySQL
4.8. XML
II. Type of installation
5. Nomenclature of Server Types
5.1. Stand Alone Server
5.2. Domain Member Server
5.3. Domain Controller
6. Samba as Stand-Alone Server
6.1. User and Share security level
7. Samba as an NT4 or Win2k Primary Domain Controller
7.1. Prerequisite Reading
7.2. Background
7.3. Configuring the Samba Domain Controller
7.4. Creating Machine Trust Accounts and Joining Clients to the Domain
7.5. Common Problems and Errors
7.6. Domain Control for Windows 9x/ME
8. Samba Backup Domain Controller to Samba Domain Control
8.1. Prerequisite Reading
8.2. Background
8.3. What qualifies a Domain Controller on the network?
8.4. Can Samba be a Backup Domain Controller to an NT PDC?
8.5. How do I set up a Samba BDC?
9. Samba as a ADS domain member
9.1. Setup your smb.conf
9.2. Setup your /etc/krb5.conf
9.3. Create the computer account
9.4. Test your server setup
9.5. Testing with smbclient
9.6. Notes
10. Samba as a NT4 or Win2k domain member
10.1. Joining an NT Domain with Samba 3.0
10.2. Why is this better than security = server?
III. Advanced Configuration
11. UNIX Permission Bits and Windows NT Access Control Lists
11.1. Viewing and changing UNIX permissions using the NT security dialogs
11.2. How to view file security on a Samba share
11.3. Viewing file ownership
11.4. Viewing file or directory permissions
11.5. Modifying file or directory permissions
11.6. Interaction with the standard Samba create mask parameters
11.7. Interaction with the standard Samba file attribute mapping
12. Configuring Group Mapping
13. Printing Support
13.1. Introduction
13.2. Configuration
13.3. The Imprints Toolset
13.4. Diagnosis
14. CUPS Printing Support
14.1. Introduction
14.2. Configuring smb.conf for CUPS
14.3. CUPS - RAW Print Through Mode
14.4. CUPS as a network PostScript RIP -- CUPS drivers working on server, Adobe PostScript driver with CUPS-PPDs downloaded to clients
14.5. Windows Terminal Servers (WTS) as CUPS clients
14.6. Setting up CUPS for driver download
14.7. Sources of CUPS drivers / PPDs
14.8. The CUPS Filter Chains
14.9. CUPS Print Drivers and Devices
14.10. Limiting the number of pages users can print
14.11. Advanced Postscript Printing from MS Windows
14.12. Auto-Deletion of CUPS spool files
15. Unified Logons between Windows NT and UNIX using Winbind
15.1. Abstract
15.2. Introduction
15.3. What Winbind Provides
15.4. How Winbind Works
15.5. Installation and Configuration
15.6. Limitations
15.7. Conclusion
16. Advanced Network Manangement
16.1. Configuring Samba Share Access Controls
16.2. Remote Server Administration
16.3. Network Logon Script Magic
17. System and Account Policies
17.1. Creating and Managing System Policies
17.2. Managing Account/User Policies
17.3. System Startup and Logon Processing Overview
18. Desktop Profile Management
18.1. Roaming Profiles
18.2. Mandatory profiles
18.3. Creating/Managing Group Profiles
18.4. Default Profile for Windows Users
19. Interdomain Trust Relationships
19.1. Trust Relationship Background
19.2. Native MS Windows NT4 Trusts Configuration
19.3. Configuring Samba NT-style Domain Trusts
20. PAM Configuration for Centrally Managed Authentication
20.1. Samba and PAM
20.2. Distributed Authentication
20.3. PAM Configuration in smb.conf
21. Stackable VFS modules
21.1. Introduction and configuration
21.2. Included modules
21.3. VFS modules available elsewhere
22. Hosting a Microsoft Distributed File System tree on Samba
22.1. Instructions
23. Integrating MS Windows networks with Samba
23.1. Name Resolution in a pure Unix/Linux world
23.2. Name resolution as used within MS Windows networking
24. Improved browsing in samba
24.1. Overview of browsing
24.2. Browsing support in samba
24.3. Problem resolution
24.4. Browsing across subnets
24.5. Setting up a WINS server
24.6. Setting up Browsing in a WORKGROUP
24.7. Setting up Browsing in a DOMAIN
24.8. Forcing samba to be the master
24.9. Making samba the domain master
24.10. Note about broadcast addresses
24.11. Multiple interfaces
25. Securing Samba
25.1. Introduction
25.2. Using host based protection
25.3. Using interface protection
25.4. Using a firewall
25.5. Using a IPC$ share deny
25.6. Upgrading Samba
26. Unicode/Charsets
26.1. What are charsets and unicode?
26.2. Samba and charsets
26.3. Conversion from old names
26.4. Japanese charsets
IV. Appendixes
27. How to compile SAMBA
27.1. Access Samba source code via CVS
27.2. Accessing the samba sources via rsync and ftp
27.3. Verifying Samba's PGP signature
27.4. Building the Binaries
27.5. Starting the smbd and nmbd
28. Migration from NT4 PDC to Samba-3 PDC
28.1. Planning and Getting Started
28.2. Managing Samba-3 Domain Control
29. Portability
29.1. HPUX
29.2. SCO Unix
29.3. DNIX
29.4. RedHat Linux Rembrandt-II
29.5. AIX
29.6. Solaris
30. Samba and other CIFS clients
30.1. Macintosh clients?
30.2. OS2 Client
30.3. Windows for Workgroups
30.4. Windows '95/'98
30.5. Windows 2000 Service Pack 2
30.6. Windows NT 3.1
31. SWAT - The Samba Web Admininistration Tool
31.1. SWAT Features and Benefits
32. Samba performance issues
32.1. Comparisons
32.2. Socket options
32.3. Read size
32.4. Max xmit
32.5. Log level
32.6. Read raw
32.7. Write raw
32.8. Slow Clients
32.9. Slow Logins
32.10. Client tuning
33. The samba checklist
33.1. Introduction
33.2. Assumptions
33.3. The tests
33.4. Still having troubles?
34. Analysing and solving samba problems
34.1. Diagnostics tools
34.2. Installing 'Network Monitor' on an NT Workstation or a Windows 9x box
34.3. Useful URL's
34.4. Getting help from the mailing lists
34.5. How to get off the mailinglists
35. Reporting Bugs
35.1. Introduction
35.2. General info
35.3. Debug levels
35.4. Internal errors
35.5. Attaching to a running process
35.6. Patches
  Next
  General installation